HIGH🇵🇱 Wersja polska

CVE-2021-27665

CVSS 7.5v3.1pub. 2021-10-11upd. 2024-11-21

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Johnsoncontrols Exacqvision Server

    APP
    Johnsoncontrols
    ≤ 21.06.11.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-32758CRITICAL9.0PL ✓same product

Niewystarczająca długość klucza kryptograficznego w komunikacji exacqVision

CVE-2024-32865MEDIUM6.4same product

Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by con...

CVE-2019-7590MEDIUM6.7same product

ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted servic...

CVE-2023-4804CRITICAL10.0PL ✓same vendor

Niezamierzone ujawnienie funkcji debug w Johnson Controls Quantum HD Unity

CVE-2023-2024CRITICAL10.0PL ✓same vendor

Pominięcie uwierzytelnienia w Johnson Controls OpenBlue Enterprise Manager Data Collector